General
-
Target
2024-04-10_2aca43c307eb450c954a12d156e0ede8_mafia
-
Size
465KB
-
Sample
240410-tz8c6adh76
-
MD5
2aca43c307eb450c954a12d156e0ede8
-
SHA1
8c9a87ae79ac8b2e7e4a2b918cb37a23eeab6be5
-
SHA256
f3aba111a8a8b98e1d9179d2e2f3b50a65a9d868b10d1af1cd648ed433955a66
-
SHA512
3351cbb8d7efc2eaee81f37de393c631975fcf62ce519d66e275f935110446f4d5689c3ab64e0e4e8828ce764c3019d5d8cae9bfda4bfb15153916e537001f71
-
SSDEEP
12288:Bb4bZudi79LUH4cbihI3PhnGXZaK94j+FmRA:Bb4bcdkLUYcei3pGD9IP
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_2aca43c307eb450c954a12d156e0ede8_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_2aca43c307eb450c954a12d156e0ede8_mafia.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_2aca43c307eb450c954a12d156e0ede8_mafia
-
Size
465KB
-
MD5
2aca43c307eb450c954a12d156e0ede8
-
SHA1
8c9a87ae79ac8b2e7e4a2b918cb37a23eeab6be5
-
SHA256
f3aba111a8a8b98e1d9179d2e2f3b50a65a9d868b10d1af1cd648ed433955a66
-
SHA512
3351cbb8d7efc2eaee81f37de393c631975fcf62ce519d66e275f935110446f4d5689c3ab64e0e4e8828ce764c3019d5d8cae9bfda4bfb15153916e537001f71
-
SSDEEP
12288:Bb4bZudi79LUH4cbihI3PhnGXZaK94j+FmRA:Bb4bcdkLUYcei3pGD9IP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-